VYPR
← All advisories
Unrated severityOSV Advisory· Published Jan 15, 2026· Updated Jan 15, 2026

CVE-2025-67083

CVE-2025-67083

Description

Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and the file type depends on the web server and its configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Invoiceplane/InvoiceplaneOSV2 versions
    0.9beta, v1.0.0, v1.0.1, …+ 1 more
    • (no CPE)range: 0.9beta, v1.0.0, v1.0.1, …
    • (no CPE)range: <=1.6.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.